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So this is Newsletter No. 3 and just to keep things interesting we've 
got an exclusive from our technical expert on cracking program 
Protection. But we'll save that for later - first a gripe. Where are 
those lists of programs etc that were requested last issue. The 
software Sub-Committee needs yau to respond, or else you won't get 
any nice, new games fromthrough)? us. We can let you Know of the 
Persont¢s) most likely to swap with you to get aoe Kind of program you 
are after, IF we, Rave, FEEDBACK: 


The discussion at last Monday’s meeting centred mainly around aspects 
of loading programs - some of which was beyond me so bad luck if you 
can't follow the following. 


Two ways of laading preagrams from within other programs were 
described. The tirst should be used toe lead basme fpRreorams: andi .s 
simply:- 


PO load*xvz” 


Note that "xvz" will automatically run once loaded and therefore 
should be the last statement accessed By the loader program. An 
example of this would he the first program sats up sprites and user 
defined character sete, and the second program actually runs the 
gSame:.t Crazy Kang if an example of this?. An alternative to Be used 


when chain loading a machine language program 15:5 


VO Ses +1 
ear 2 att) tran leg! Sow A» 4 
sa if ace them sve 1 viti 


In this case the toaded program will not execute until the 
appropriate SYS pumber is encauntered. (Tech note: those among yau 
with some programming Knowledge may be wondering haw the SYS is ever 


executed in the example above. What happens is that the program 
continues RE-runhning "forever". Therefare an the second run through, 
A picks up the yvalwaea of 2, and the SYS is performed. You may ask how 


or why does this frappeen? Ans. - Buggered if I Know!3 
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There was also a query about whether machine code can be got out’ of 
the ‘computer without’ turning the machine off. The answer is to enter 
SYS 6473S to reset the pointers and=-creatée “power wp” condition. Thac 
should make turning the machine off unnecessary. 


The procedure for direct copy ins of tapes without using the, computer 
should Be of interest to ape users: A Feasonably high quality 
cassette deck and a cheap tape recorder are required. The cheap tape 
recorder... which. is plugged into the tape, deck, is “wsad to "play the 
tape. The cassette deck is. used ta record the signal on the blank 
cassette. The Vi Uce meter of the cassette_deck, should. ba Kept an the 
red zone ie volume shauld be Kept up very high. Thais procedure makes 


tape copr'ing ttirice as fast as normal; allows. protection to be Copied 


and avoids tying up the computer. 

¢Tech note: This is a good way of copying tapes and bypassing 
protection, but recording level is extremely critical- just ask Ian 
Wild!» ; 
Further to last week's message about subscribing to Compute's 
Gazette, Scott Shaw ist Keen to hear from anyone who would like toa 
share the costs of subscription. He hopes to share the magazines 
around a group of about six people. Please contact Scott Shaw on 
extension 4@Q. 


CONVENOGR'S CORNER 


Keep those agenda items coming in! Page 5 af the New Leaf Na 8S {May 
169 raises an, interesting point. Now that tetttaviems wflexablie buneh 
time (fram May 28) we have the passibility of longer meetings. 


Is this What vou want? If it is we may have fo Meet eiseunere ta 
avoid’ conrlict with staff taking /shoerterr lunches: Anyway Rave a think 


about ity. We’ Mil disctiss Pt .ene June W4tnet Laken  Ssance no-one showed 

up! We'’li try wagain om the iIS8th» inpAssessmentiSect ton, start ing’ ar 
2.45, preservims the Status Gus until the -comsultave pirocess is 

through ! 

TECH TALK 


by "tie Rade? 


i 


Topic : Pragram ardtectidrn,. arid x46 negatian. 


& 
unécrupulous people from reaping the rewards of the writer's effort, 


r for those efforts; Y wid ttempt ta 
hh time tP 


Programs are pretected by the writer in erder 
G 


without rewarding the writ a 

illuminate some of these methods, and try to give ideas o 

negation for the eager and/or inexperienced. 
e 


The tearm negation if used to indicat that pretletiagt “cracking ®* 
ie sometimes a subtle act. Proeteetian can be al tereo;+ bypassed, or 
HuUSBt Slain’ removed . 


Many people find that cracking programs is a most pleasurable 
Yr 


E 

activity. Matching wits with the programmer provides goad mental] 

@ x & ise amd etimulus. AEtually;, 1] Believe tha it i165 one of the 

G ays to improve your Knowledge of yaur machine, because in order 
rer some pragram you need ta understand what the program cade S. 
at tha ioarttewlar point in question 
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Now on with the show! Qne af the cammanest and simplest farms 
of pragram protection is the "memory check/reset" method. THAS 
involves the program checking a particular memory location for a 
Spec rrfic.vaiue. If oan ANneGcorreet Value is. stored there, the code 


ends control to the “cold start” roautine ln memory; which: has the 
same effact as turning your machine off!itwell, nearly>d 

Fortunately this type of pratection is @asily seen Cthe screen 
shrinks horizontally and the power up message is displayed>. There 
are 2 Ffairliy easy ways to remove this barrier to vour comeutina 
enjoyment, via either machine code or basic... 
Ci») Machine «ode. 

After firing up Your monitor, *Fili the basic memory with 


yi 
Wy 


N 
i) 
Q 
va 
i 


F ©2600 SFFF aa 
ThenHioad in the program 


Lesa "tC prog.name J" of 
Finally, hunt for the machine code instruction JMP $FCE2 by 
entering 


HH SSs6e8 SFFF 4C E2 FC 


Hopefully a 4 digit hexadecimal number will be output to the screen. 
If not, you ane, shall we say> vin JAthel-poo. 

Now disassemble memory in the region of the number on the 
screen. E.9. if the number @OSOF was ocutput earlier, then disassemble 
from about G29@QQ onwards. 


Oo g9g90ea@ 9929 
This should Sivewwvou’ a disp layins imo lar C6 chaise - 
9900 LOA #SFE 


Qa02e LOA #01 
aqaa4g STA Fanaa 


aga? LOA #42498 , Ghecking Une cassetverbuffer after a load 
As3aA CMP seA Pe" Tek eae ee KE 

agac BEG #agdie2 , MP ALT 1 then Gonmtanve with the program 
AAAF IMP #FCEe , if not bomb the program aut 


agi2 {Cmore instructions Feilow 3 


ake appropriate 
aAGte 10On"*. Wile ter the tape header 
#5 inelude the misging "*#" By resaving the pragram withthe "#" im 
the name at the right spot ‘but count carefully!) ,ar we can alter the 
“et 


} 
ares the jump to cald st 
st; 66 Ha iaLipsran 


the problem, and can therefore t 
G 1 


now have several options. le 


arpagrean sovthat it ign c 
Pi Have found that this is Usually the ease 
now tae de It. 
Type A @3QF NOP and return 
NOP return twice 


a 


Po kd t i P ‘ 
Mow type return 


fully removed the protection from this 
wired now is to save the program to tape, 
1 leave ta the fnquisitive ! 


ity 


YoU Rave yHow succes 
pragram! Aly tithe) is 
the method af whieh YF wi 


mu 
— 


{3} 
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Ce? Bra lo 
The methodology here is similar to that of the mach ine 
language pragrammer, But dane via interpretive basic commands. 
Pirstliy, lead the erogram in. 


Non, the tricky bit. We must search basic memory for the 
JuUMe: “to. €Coid start, so "that we can nailiftyv it. This 4as done by 
typing NEW and returns A short basic program is nok tSped in. 


@ for I = 2049 to 16000: if 
Cpeekt 1)< +76) then next 
1 aif <€ peek< 1#1)< S226 ort peeks Lte)< 7e5e> 2) then next 
2 print Found at 4°? linext 


This checks for the jump code. If a "found at" message doesn't 
occur, then try’ changing’ \Line, 6 toy Si6eo0o to Gauge”. 
If a found at does occurs then, write down then figures.after the 
COl1OM. Reload the original program and type in 
poke {faund atj,234 
poke {found att!11,234 
poke Cound atte )],234 
Now try to save the altered program, which will hopefully work. 
CONGRATULATIQNS, you are now a fully fledged "byte buster"! A Few oF 
the programs that the technique will work on are: 
Centropods 
Pakacuda 
Hustler Calthough it doesn't use the cold start, but puts up a 
message saying "ILLEGAL COPY") 
I think that I have taken up enough space this time, so until next 
issue, I bid you ‘happy cracking and happy computing’. 


C4?) 





